本书以"理实一体化”"做中学，学中做”"理论知识够用，技能为主”为教学理念，以构建中小型企业网络工程为背景，采用项目化教学模式，通过任务驱动的形式展开讲解。全书以华为设备为核心，详细介绍了交换机、路由器等网络设备的配置与管理操作命令，紧密结合实际工程场景，帮助学生掌握网络搭建的核心技能。每个项目均设计为具体任务，学生通过完成从网络规划、设备配置到故障排查等一系列任务，逐步提升对网络架构的全面理解和实践动手能力。书中内容注重实用性与可操作性，图文并茂，语言通俗易懂，既适合课堂教学，也便于学生自学。本书旨在培养学生在真实工作环境中解决实际问题的能力，为其未来从事网络工程相关工作奠定坚实基础。

邵云娜，女，副教授，高级工程师，高级技师，网络工程师，技师，浙江安防职业技术学院教师，主要研究方向为计算机网络和信息安全。两次获校级教学能力比赛二、三等奖，荣获"十佳教师”、"青年骨干教师”等称号，课程被评为"百堂精彩一课”。主持市厅级课题4项、横向课题1项，发表SCI论文2篇、北大核心1篇，申请专利3项、软著5项并成功转化1项。多次为政府、企业提供技术培训和评审服务，参与温州市中职技能大赛裁判等工作。著作方向计算机网络技术和计算机基础，主编教材4本，其中1本获浙江省"十四五”重点教材立项，建设在线开放课程2门。

项目 1 认识局域网··········································································································1
任务 1 局域网基础知识··································································································2
1.1.1 了解局域网···································································································2
1.1.2 理解网络拓扑结构··························································································5
1.1.3 理解网络体系结构··························································································9
1.1.4 理解 IP 地址和子网划分················································································.16
任务 2 网络工程规划与设计·························································································.25
1.2.1 设计思路···································································································.25
1.2.2 方案实现···································································································.28
项目 2 搭建办公网络····································································································.31
任务 1 交换机基础知识·······························································································.32
2.1.1 认识交换机································································································.32
2.1.2 通过 Console 端口配置交换机·········································································.34
2.1.3 使用 Telnet 方式登录交换机···········································································.36
2.1.4 使用 eNSP 网络仿真平台···············································································.38
任务 2 搭建部门网络··································································································.42
2.2.1 按部门划分 VLAN 隔离办公网络 ····································································.42
2.2.2 采用交换机级联实现跨交换机同部门的连通 ······················································.46
2.2.3 实现不同部门之间的网络连通 ········································································.49
2.2.4 使用 DHCP 分配 IP 地址 ···············································································.52
任务 3 提高网络冗余性·······························································································.56
2.3.1 使用端口链路聚合技术增加网络带宽 ·······························································.56
2.3.2 启用生成树协议解决冗余链路引起的环路问题 ···················································.59
2.3.3 使用堆叠技术增加网络带宽···········································································.64
项目 3 搭建园区网络····································································································.68
任务 1 认识路由器·····································································································.69
3.1.1 路由器基础知识··························································································.69
3.1.2 配置路由器子接口实现 VLAN 间的通信 ···························································.71
任务 2 使用静态路由实现园区网络的互联·······································································.73
3.2.1 使用静态路由实现网络互联···········································································.73
3.2.2 使用默认路由实现全网互联···········································································.75
任务 3 使用 VRRP 技术提高网络的可靠性 ······································································.78
项目 4 实现区域网络互联·····························································································.82
任务 1 使用 RIP 实现区域网络互联················································································.83
4.1.1 认识 RIP ···································································································.83
4.1.2 使用 RIP 实现区域网络互通···········································································.88
任务 2 使用 OSPF 协议实现区域网络互联 ·······································································.92
4.2.1 认识 OSPF 协议 ··························································································.92
4.2.2 使用 OSPF 协议实现区域网络互通 ··································································.99
任务 3 使用路由重分布实现多路由协议之间的网络互联·····················································106
4.3.1 RIP 与 OSPF 的路由双向重分布······································································106
4.3.2 直连路由和静态路由重分布到 OSPF 协议··························································110
项目 5 Internet 接入及网络安全 ···················································································115
任务 1 访问控制列表··································································································116
5.1.1 访问控制列表基础配置·················································································116
5.1.2 高级访问控制列表配置·················································································126
5.1.3 复杂访问控制列表配置·················································································132
任务 2 防火墙和 NAT·································································································139
5.2.1 防火墙基础配置··························································································139
5.2.2 Basic NAT 配置···························································································149
5.2.3 NAPT 配置 ································································································154
5.2.4 NAT Server 配置 ·························································································157
任务 3 VPN 技术及应用······························································································162
5.3.1 GRE 隧道应用 ····························································································162
5.3.2 IPSec VPN 技术 ··························································································172
项目 6 搭建无线局域网································································································183
任务 1 搭建企业无线网络····························································································184
6.1.1 WLAN 基础知识 ·························································································184
6.1.2 企业 WLAN AC+AP 方式组网 ········································································187
任务 2 WLAN 工勘····································································································194
6.2.1 信号衰减测试·····························································································194
6.2.2 现场工勘···································································································196
项目 7 中小型企业网安全架构······················································································203
7.1 方案总体设计 ······································································································203
7.2 外网出口区·········································································································204
7.3 数据中心区·········································································································206
7.4 运维管理区·········································································································207
7.5 终端接入区·········································································································211
7.6 桌面云服务器区 ···································································································213